Cyber Security Newsletter Fall 2008
Welcome to the Fall 2008 edition of the Cyber Security for the Digital District newsletter. We hope this information is helpful to you and we welcome your suggestions for future editions. Contact linda@cosn.org.
National Cyber Security Month
October was National Cyber Security Month and the National Cyber Security Alliance sponsored many activities and lesson plans to promote awareness about cyber security issues and engage users in implementing additional security measures to protect their computers.
During the month, the NCSA released a report highlighting the disparity between what Americans think they have and what is actually installed on their computer. A similar report was released last year and was referenced in our Fall 2007 Cyber Security newsletter. It is apparent that there is still a lot of education that needs to be done. Schools play a major role in informing students and parents of the need to have their personal computers safe.
Fall 2008 Fall 2007
Perception Reality Perception Reality
Using Spam Filters 75% 52% 61% 21%
Using Anti-Virus Software 93% 95% 87% 52%
Using Anti Spyware Software 83% 82% 70% 55%
Firewall Installed 81% 43% 73% 64%
While National Cyber Security Month is past, it is never too late to include information about online safety for students and staff. For additional information and lesson plans please access www.staysafeonline.info
Acceptable Use Policies
Acceptable Use Policies (AUPs) are an important aspect of any school district’s internet safety policy. Often school districts have guidelines based upon national recommendations; however, general AUPs do not necessarily cover every aspect that may face an individual school. Many schools don’t realize that an AUP is not strictly limited to students. A comprehensive policy must also be in place for all staff, teachers, administrators and support staff – any individual that has access to the internet. In addition to developing an AUP, schools should determine how to present and enforce them. By teaching students and staff responsible behavior, asking them to sign an agreement, and providing written descriptions of the consequences for wrongful action, users develop a sense of responsibility and ownership for their online experience.
You probably already have an AUP in your district, but it is always wise to compare it with others to ensure that you have included the best suggestions. The following web sites provide information, suggestions and ideas for developing comprehensive AUPs.
http://www.isafe.org/imgs/pdf/education/AUPs.pdf
http://www.usdoj.gov/criminal/cybercrime/rules/acceptableUsePolicy.htm
http://www.coedu.usf.edu/internetsafety/acceptab.htm
http://commtechlab.msu.edu/Sites/letsnet/noframes/teachers/art/b9u1l4.html
http://www.cybercrime.gov/rules/acceptableUsePolicy.htm
Spam Attacks
According to a report released by Sophos, the amount of spam sent out was eight times more in Q3 2008. Sophos reports Identity thieves and hackers striking Windows users on all fronts. The figures show an alarming rise in the proportion of spam emails sent with malicious attachments between July - September 2008, as well as an increase in spam attacks using social engineering techniques to snare unsuspecting computer users. Although most schools filter against these type of attachments, it is important to be aware that spammers are becoming more skilled at sending legitimate looking emails, such as the EncPk-CZ Trojan which pretended to be a Microsoft security patch, and the Invo-Zip malware, which masqueraded as a notice of a failed parcel delivery from firms such as Fedex and UPS. For more information, please refer to http://www.sophos.com/pressoffice/news/articles/2008/10/spamreport.html.
Malware
Malware disguised as social networking tops emerging security threats.
What's the top threat to data security going to be in 2009? According to the GTISC Emerging Cyber Threats Report for 2009 out of Georgia Tech's Information Security Center, the answer is malware specifically disguised as "benign social networking links." Read this report by Dave Nagel at http://www.thejournal.com/articles/23451
IBM X-Force Provides Internet Threat Analysis and Assistance
Organizations today are faced with an increasing array of Internet threats, and it’s often difficult for resource-constrained support staffs to know where to turn for timely and comprehensive information to identify, isolate, and mitigate these new threats. IBM’s Internet Security Systems X-Force Research and Development Team researches and monitors the latest Internet threat trends and provides guidance to the public on how to respond to emerging and critical threats. Please visit the following web site for the latest information, including “Frequency X”, the X-Force information security blog, a list of current alerts and advisories compiled from a wide range of sources, and monthly, midyear, and annual threat reports showing trends over time. Add to your arsenal and improve your effectiveness by tapping the power of the X-Force.
http://www-935.ibm.com/services/us/index.wss/offerfamily/iss/a1029112
IT Crisis Preparedness
In October, CoSN launched a new initiative focusing on IT Crisis Preparedness. Disaster Recovery Planning is an ongoing process that requires detailed planning and preparation prior to an event, and then setting the groundwork for understanding the process of responding. District's technology programs have grown to touch virtually every aspect of activities in modern-day schools - teaching and learning, data-tracking and record-keeping, internal and external communications, and more. Recent events in our have illustrated the need for school technology leaders to be actively involved in crisis preparedness to ensure student safety and business continuity. For information on the role of technology leaders, identifying best practices and develping strategies for safegaurding of critical services, http://www.cosn.org/itcrisisprep.
.
A New Look at Cell Phone Policies
By Sharon O’Connor Riehle, Technology Director,Cretin-Derham Hall, St. Paul, MN
Cell phone use has become a kind of cat-and-mouse game at many schools that ban the devices during school hours. These policies are proving nearly impossible to enforce, with students able to text from their pockets, and even parents routinely sending messages during the school day.
Because many phones are now multi-use devices which include not only cell phones, but also internet, camera, microphone and MP3 player, it becomes even more difficult to enforce a ban in situations in which these tools have a clear educational purpose. A student may wish to look something up on the internet, take a photo of the whiteboard notes, or listen to lecture notes or audiobooks on the MP3 player.
But some schools are taking a fresh look and allowing some use between, and occasionally even in classes. For instance, at several Minnesota schools, including Richfield and Fergus Falls, cell phones are allowed, but cannot be used during class. This creates opportunities to openly discuss appropriate cell phone use, meets parents’ needs to stay in touch, and affords students the opportunity to show responsibility.
Valid concerns about appropriate use remain, however. Cheating is an ongoing concern. Careful assignment and test construction make it more difficult to cheat (electronically or otherwise), but teachers need both time and instruction on these techniques. Meanwhile, web services such as ChaCha (www.chacha.com) allow students to text questions, have the research done for them, and receive answers within 2-3 minutes (free!). This only underscores the need to keep teachers up to date on technology, and support teachers with time to change instruction appropriately.
About CoSN
The Consortium for School Networking (CoSN), a national non-profit organization, is the premier voice in education technology leadership. Our mission is to advance the K-12 education community's capacity to effectively use technology to improve learning through advocacy, policy and leadership development. Our members represent school districts, state and local education agencies, nonprofits, companies and individuals who share our vision. To learn how membership in CoSN can make a difference in your district, click on www.cosn.org/join or contact us at either membership@cosn.org or 866/267-8747 x115.
You are receiving this e-newsletter because you visited www.securedistrict.org and requested information about CoSN's Cyber Security Leadership Initiative. Please share this e-newsletter with others who share your interest in this topic. If you have any questions, please contact:
Linda Sharp
Project Director, Cyber Security for the Digital District
ph: 303-771-1271
linda@cosn.org